CVE-2017-4961

概要

参考情報

• cloudfoundry.org/cve-2017-4961 · Vendor Advisory

bosh のその他の脆弱性

• CVE-2026-41704中 5.0AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads …
• CVE-2026-41009中 5.8When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log…
• CVE-2019-11271高 7.8Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to us…
• CVE-2018-11083高 8.1Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allow…